Das SQL Statement sieht dann so aus:

SELECT [Name], SN [Last Name], ST State
FROM OPENQUERY( ADSI,

‘SELECT Name, SN, ST FROM ”LDAP://Domaincontroller/DC=YourDomain,DC=local”

WHERE objectCategory = ”Person” AND objectClass = ”user”’)

bei den Parametern /enableSIDHistory und /quarantine gibt man üblicherweise NO an (weil ja alles in Englisch ist). Wenn es aber ein deutsches Betriebssystem ist, dann muss man hier aber NEIN angeben, dann klappt’s sofort.

Da kommt doch kein Mensch drauf…..

Get-ReceiveConnector “Anonymous Relay” | Add-ADPermission -User “NT AUTHORITY\ANONYMOUS LOGON” -ExtendedRights “Ms-Exch-SMTP-Accept-Any-Recipient”

Set-RpcClientAccess –Server –EncryptionRequired $False

Weitere Infos hier: http://support.microsoft.com/kb/2006508/en-us

Leider hat Microsoft die maximale Größe für den Regelspeicher auf 8k beschränkt. Viele Regeln passen da nicht rein, insbesondere wenn die Regeln viel Inhalt (Mailadressen oder Wörter) enthalten.

Als Lösung/Workaround wird deshalb ein Transport Agent vorgeschlagen.

Hier eine Lösung für einen RoutingAgent, der Mailverteiler nur im BCC Feld zulässt. Sollte ein Mailverteiler in To oder CC verwendet werden, wird die Nachricht zurückgeschickt. Die Gruppen werden anhand des Active Directory Attributes “msExchRequireAuthToSendTo” gefiltert, welches auf TRUE stehen muss.

Beispiel (Class Library):
Bitte die folgenden Dateien zum Projekt hinzufügen (C:\Program Files\Microsoft\Exchange Server\Public) und dann darauf referenzieren:
- Microsoft.Exchange.Data.Common.dll
- Microsoft.Exchange.Data.Common.xml
- Microsoft.Exchange.Data.Transport.dll
- Microsoft.Exchange.Data.Transport.xml

 
Imports System
Imports System.Collections.Generic
Imports System.Text
Imports System.Diagnostics
Imports Microsoft.Exchange.Data.Transport
Imports Microsoft.Exchange.Data.Transport.Email
Imports Microsoft.Exchange.Data.Transport.Smtp
Imports Microsoft.Exchange.Data.Transport.Routing
Imports Microsoft.Exchange.Data.Common
Imports Microsoft.Exchange.Data.Mime
Imports Microsoft.Exchange.Data.ContentTypes.Tnef
Imports System.DirectoryServices

Namespace DYNASYSAgents

NotInheritable Class DYNASYSBCCRAFactory
          Inherits RoutingAgentFactory
          Public Overrides Function CreateAgent(ByVal server As SmtpServer) As RoutingAgent
                         Return New MyDYNASYSBCCRoutingAgent
          End Function
End Class

Public Class MyDYNASYSBCCRoutingAgent
          Inherits RoutingAgent

          Private Sub MySubmittedMessage(ByVal source As SubmittedMessageEventSource,_
                           ByVal e As QueuedMessageEventArgs) Handles Me.OnSubmittedMessage
                  Try
                  Dim cNachricht As String =_
                           "Bitte verwenden Sie die Mailverteiler nur im BCC: Feld." & vbCrLf
                  '*** TRUE: Nur monitoren und als Kopie ins Exchangepostfach,'*** False: Prozess ist enabled und die 
                           Mails werden aktiv geblockt!!!

                  Dim lMonitorOnly As Boolean = True
                  Dim xSMTPs As New ArrayList
                  Dim cExchangeMeldungenSMTP As String ="@DYNASYS.de" '*** immer eine Kopie an das Teampostfach
                  '*** eine Mailadresse einer Gruppe (immer nur 1 Eintrag)
                  Dim xGroupSMTP As String Dim lFound As Boolean = False

                  Dim xToRecipient As Microsoft.Exchange.Data.Transport.Email.EmailRecipientCollection
                  Dim xCCRecipient As Microsoft.Exchange.Data.Transport.Email.EmailRecipientCollection
                  Dim xRecipient As Microsoft.Exchange.Data.Transport.Email.EmailRecipient
                  Dim normalRejectResponse As New Microsoft.Exchange.Data.Transport.Smtp.SmtpResponse
                           ("500", "", "your message has been rejected")
                  Dim cMyBody As Email.Body

                  '***
                  '*** ist der Sender aus der DYNASYS? Dann die To und CC Empfänger prüfen
                  '***
                  If e.MailItem.Message.Sender.SmtpAddress.ToUpper.IndexOf("@DYNASYS.DE") > 0 Or
                                    e.MailItem.Message.Sender.SmtpAddress.ToUpper.IndexOf("@DYNASYS.AT") > 0 Or
                                    e.MailItem.Message.Sender.SmtpAddress.ToUpper.IndexOf("DYNASYS-GROUP.COM")
                  > 0 Then

                           xSMTPs = GetSMTPAddresses() '*** Hole alle Mailadressen für die Blacklist

                           '***
                           '*** Hole alle Mailempfänger aus To und CC
                           '***
                           xToRecipient = e.MailItem.Message.To
                           xCCRecipient = e.MailItem.Message.Cc

                           lFound = False '*** Flag für Überprüfung

                           '***
                           '*** Alle im To Feld
                           '***
                           For Each xRecipient In xToRecipient '** Alle TO:
                                    For Each xGroupSMTP In xSMTPs
                                             If xRecipient.SmtpAddress.ToUpper = xGroupSMTP.ToUpper Then
                                                      lFound = True
                                                      '*** ein Treffer ist ausreichend um die Mail zu blockieren
                                                      Exit For
                                             End If
                                    Next
                           Next
                           '***
                           '*** Alle im CC Feld.
                           '*** Ist aber nur nötig, wenn im To Feld noch nichts gefunden wurde.
                           '*** ansonsten würde die Mail ja eh schon blockiert werden
                           '***
                           If Not lFound Then
                                    For Each xRecipient In xCCRecipient '*** Alle CC:
                                             For Each xGroupSMTP In xSMTPs
                                                      If xRecipient.SmtpAddress.ToUpper = xGroupSMTP.ToUpper Then
                                                               lFound = True
                                                               '*** ein Treffer ist ausreichend um die Mail zu blockieren
                                                               Exit For
                                                      End If
                                             Next
                                    Next
                           End If

                           If lFound Then
                                    '*** Diese Mail darf nicht gesendet werden, weil in To oder CC eine Gruppe verwendet wird....
                                    If Not lMonitorOnly Then
                                             '*** Achtung: geht nur, wenn der Monitorbetrieb ausgeschalten ist lMonitorOnly=FALSE
                                             '*** Alle Empfänger entfernen

                                             e.MailItem.Recipients.Clear()
                                             '*** Sender als Empfänger einsetzen
                                             e.MailItem.Recipients.Add(e.MailItem.Message.Sender.SmtpAddress)
                                             '*** Betreff ergänzen um Hinweistext
                                             e.MailItem.Message.Subject = "[Exchange Server: Ihre Nachricht wurdenicht zugestellt!]:"_
                                                      & e.MailItem.Message.Subject
                                             '*** Priorität auf Hoch stellen - hat jedoch bisher keinen Effekt bei der Mail gehabt
                                             e.MailItem.DeliveryPriority = DeliveryPriority.High
                                             '* DSN (Deliver Status Notification auf Full setzen
                                             e.MailItem.DsnFormatRequested = DsnFormatRequested.Full
                                             '*** Der Exchangeserver ist nun der Absender
                                             e.MailItem.Message.Sender.DisplayName = "Microsoft Exchange"
                                             '*** und die Mailadresse des Postmasters einsertzen
                                             e.MailItem.Message.Sender.SmtpAddress = "postmaster@DYNASYS.de"
                                             '*** Hole den Body der Nachricht
                                             cMyBody = e.MailItem.Message.Body
                                             '*** lese den Body in "originalBody" ein
                                             Dim originalBody As System.IO.Stream = cMyBody.GetContentReadStream()
                                             '*** Setze einen Writer drauf, damit der Body erweitert werden kann
                                             Dim newBody As System.IO.Stream = cMyBody.GetContentWriteStream()
                                             '*** Prüfe/Hole die Codierung (Encoding) der Mail, die müssen wir beibehalten
                                             Dim encoding As Text.Encoding = Text.Encoding.GetEncoding(cMyBody.CharsetName)

                                             '*** Unterscheide das BodyFormat nach HTML, Text und RTF
                                             Select Case e.MailItem.Message.Body.BodyFormat.ToString.ToUpper
                                             Case "HTML"
                                                      Dim conversion As New Microsoft.Exchange.Data._
                                                               TextConverters.HtmlToHtml
                                                      '*** Hei HTML andere convertierung verwenden
                                                      conversion.InputEncoding = encoding
                                                      conversion.HeaderFooterFormat = Microsoft.Exchange.Data._
                                                                                                            TextConverters.HeaderFooterFormat.Html
                                                      conversion.Header = cNachricht

                                                      '*** Den Text wollen wir als Header einfügen (am Kopf der Nachricht)
                                                      conversion.Convert(originalBody, newBody) '*** Schreibe den Text in die Originalnachricht 

                                             Case "TEXT"
                                                      Dim conversion As New Microsoft.Exchange.Data._
                                                               TextConverters.TextToText
                                                      conversion.InputEncoding = encoding
                                                      conversion.HeaderFooterFormat = Microsoft.Exchange.Data._
                                                      TextConverters.HeaderFooterFormat.Text
                                                      conversion.Header = cNachricht
                                                      conversion.Convert(originalBody, newBody)
                                             Case "RTF"
                                                               Dim conversion As New Microsoft.Exchange.Data._
                                                                        TextConverters.RtfToRtf
                                                               conversion.Header = cNachricht
                                                               conversion.Convert(originalBody, newBody)
                                             End Select
                                             '*** Text wurde geschrieben, also Hilfsobjekte schließen
                                             newBody.Close()
                                             originalBody.Close()
                                    End If
                                    '*** eine Kopie an das Éxchangemeldungen Postfach
                                    e.MailItem.Recipients.Add(New RoutingAddress(cExchangeMeldungenSMTP))
                                    '*** Nun wird die Mail weiterverarbeitet/zugestellt
                           End If
                  End If
         Catch ex As Exception
                  '*** place your code here
         End Try
End Sub

Private Function GetSMTPAddresses() As ArrayList
         Dim xSearchRoot As New DirectoryEntry
         Dim objSearcher As New DirectorySearcher '*** Such Object
         Dim objSearchResultCollection As SearchResultCollection '*** Ergebnis Sammlung
         Dim objResult As SearchResult '* Einzelergebnis
         Dim xGroupSMTP As New ArrayList '*** Eine Sammlung an SMTP Adressen
         Dim cSMTP As String '*** Eine SMTP Adresse
         Dim aHelp As ResultPropertyValueCollection
         Dim xSMTP As String
         Try
                  objSearcher.SearchRoot = xSearchRoot
                  objSearcher.Filter = "(msExchRequireAuthToSendTo=TRUE)"
                  objSearcher.PropertiesToLoad.Add("name")
                  objSearcher.PropertiesToLoad.Add("cn")
                  objSearcher.PropertiesToLoad.Add("MailNickName")
                  objSearcher.PropertiesToLoad.Add("proxyaddresses")
                  objSearchResultCollection = objSearcher.FindAll()

                  For Each objResult In objSearchResultCollection
                           '*** analysiere nun alle Mailadressen (SMTPs interessieren uns)
                           aHelp = objResult.Properties("proxyaddresses")
                           '*** Weil es mehr als eine Mailadresse pro Gruppe geben kann...
                                    For Each xSMTP In aHelp
                                             xSMTP = xSMTP.ToUpper '*** GROSSBUCHSTABEN
                                             '*** Neben den SMTP Adressen gibt es auch X400 Adressen, die wollen wir aber nicht
                                             If xSMTP.Substring(0, 5) = "SMTP:" Then
                                                      '*** Entferne SMTP:, damit es eine ordentliche Mailadresse wird.
                                                      cSMTP = xSMTP.Replace("SMTP:", "")
                                                      xGroupSMTP.Add(cSMTP)
                                             End If
                                    Next
                  Next

                  Catch ex As Exception
                           xGroupSMTP = Nothing
                  End Try

         Return xGroupSMTP
End Function
End Class
End Namespace

Installiert wird der Agent so:
(Powershell)

Install-TransportAgent
         -Name "DYNASYSBCCSMTPAgent"
         -TransportAgentFactory DYNASYSBCCRuleAgent.DYNASYSAgents.DYNASYSBCCRAFactory
         -AssemblyPath "D:\Program Files\Microsoft\Exchange Server\TransportRoles\agents\Rule\DYNASYSBCCRuleAgent.dll"

Enable-TransportAgent -Identity "DYNASYSBCCSMTPAgent"

Restart-Service "Microsoft Exchange Transport"

Wichtig: Die Powershell muss danach geschlossen werden, damit die Installation abgeschlossen ist.

Schnell mal eine Lösung mit Powershell gebastelt, somit leicht modifizierbar! (Suchen über mehrere Tage würde das Zeitfenster pro Tag auf die angegebenen Zeiten beschränken. Da muss ich mir noch was überlegen, wie der LogParser wirklich Date+Time erkennen kann.)

#$erroractionpreference = "SilentlyContinue"
#####
##### Array-Pfade zu den Log-Files der Exchangeserver (MBX, HUB, Edge)
#####

# Achtung: Array!
$aPfad =
"'\\EX02\d$\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking\MSGTR*.LOG'",
"'\\EX03\d$\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking\MSGTR*.LOG'",
"'\\EX08\d$\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking\MSGTR*.LOG'",
"'\\EX09\d$\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking\MSGTR*.LOG'"
$cPfad = [string]::join(", ", $aPfad)

###########################################################################################

Function SearchLogs {
#
# Suche alle Logs, baue zuerst das Datumsformat zusammen
#

$Sender = $objTextBoxS.Text
$DateVon = $objDatePickerVon.Value.ToShortDateString().Substring(6,4) + "-" +
$objDatePickerVon.Value.ToShortDateString().Substring(3,2) + "-" +
$objDatePickerVon.Value.ToShortDateString().Substring(0,2)

$TimeVon = $objTimePickerVon.Value.ToLongTimeString()
$DateBis = $objDatePickerBis.Value.ToShortDateString().Substring(6,4) + "-" +
$objDatePickerBis.Value.ToShortDateString().Substring(3,2) + "-" +
$objDatePickerBis.Value.ToShortDateString().Substring(0,2)

$TimeBis = $objTimePickerBis.Value.ToLongTimeString()
$Sender = $objTextBoxS.Text
$Recipient = $objTextboxR.Text
$Subject = $objTextBoxMS.Text

$cHelp = ""
if($Sender.length -gt 0) {
     $cHelp = $cHelp + " and sender-address like '%%$Sender%%' "
}

if ($Recipient.Length -gt 0) {
     $cHelp = $cHelp + " and recipient-address like '%%$Recipient%%' "
}

if ($Subject.Length -gt 0) {
     $cHelp = $cHelp + " and message-subject like '%%$Subject%%' "
}
$Execute = [char]34 + "select filename,substr([#Fields: date-time],0,10) AS DATE,
substr([#Fields: date-time],11,12) As Time, client-ip, client-hostname, server-ip,
server-hostname,connector-id,source,event-id,message-id,recipient-address,recipient-status,
total-bytes, recipient-count, message-subject,sender-address, return-path
from $cPfad where (date >='$DateVon' and time >=$TimeVon) and (date <= '$DateBis' and time <='$TimeBis') $cHelp
order by date,time asc" + [char]34 + " -i:CSV -nSkipLines:4 -o:DATAGRID"

$objTextBoxResult.Text = $Execute

[Diagnostics.Process]::start("C:\Program Files (x86)\Log Parser 2.2\logparser.exe",$Execute)

}

###########################################################################################
###########################################################################################
# Message Tracking Log Parser über alle Exchange-Logs gleichzeitig #
# MAIN Application #
# (c) 2009 by M.Hans@dynasys.de #
# #
###########################################################################################

#
# Variable and Inputs
#
#
# etwas .Net benötigen wir dazu
#

[void] [System.Reflection.Assembly]::LoadWithPartialName("System.Drawing")
[void] [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms")
$WhatToDo = "CANCEL"

#
# Formular
#

$objForm = New-Object System.Windows.Forms.Form
$objForm.Text = "Message Tracking..."
$objForm.Size = New-Object System.Drawing.Size(480,330)
$objForm.FormBorderStyle = "FixedSingle"
$objForm.StartPosition = "CenterScreen"
$objForm.KeyPreview = $True
$objForm.Add_KeyDown({if ($_.KeyCode -eq "Escape") {$WhatToDo="CANCEL"; $objForm.Close()}})

#
# Suche Button
#

$SearchButton = New-Object System.Windows.Forms.Button
$SearchButton.Location = New-Object System.Drawing.Size(22,250)
$SearchButton.Size = New-Object System.Drawing.Size(95,23)
$SearchButton.Text = "Suche..."
$SearchButton.Add_Click({SearchLogs ;})
$objForm.Controls.Add($SearchButton)

#
# Cancel Button
#

$CancelButton = New-Object System.Windows.Forms.Button
$CancelButton.Location = New-Object System.Drawing.Size(348, 250)
$CancelButton.Size = New-Object System.Drawing.Size(95,23)
$CancelButton.Text = "Cancel"
$CancelButton.Add_Click({$WhatToDo="CANCEL";$objForm.Close()})
$objForm.Controls.Add($CancelButton)

# ###############
# Label-"Sender"
# ###############

$objLabelS = New-Object System.Windows.Forms.Label
$objLabelS.Location = New-Object System.Drawing.Size(18, 18)
$objLabelS.Size = New-Object System.Drawing.Size(120,13)
$objLabelS.Text = "Sender (Mailadresse):"
$objForm.Controls.Add($objLabelS)

#
# TextBox-Sender
#

$objTextBoxS = New-Object System.Windows.Forms.TextBox
$objTextBoxS.Location = New-Object System.Drawing.Size(155, 15)
$objTextBoxS.Size = New-Object System.Drawing.Size(286, 20)
$objForm.Controls.Add($objTextBoxS)

# ###############
# Label-"Recipient"
# ###############

$objLabelR = New-Object System.Windows.Forms.Label
$objLabelR.Location = New-Object System.Drawing.Size(18, 40)
$objLabelR.Size = New-Object System.Drawing.Size(135,13)
$objLabelR.Text = "Empfänger (Mailadresse):"
$objForm.Controls.Add($objLabelR)

#
# TextBox-Recipient
#

$objTextBoxR = New-Object System.Windows.Forms.TextBox
$objTextBoxR.Location = New-Object System.Drawing.Size(155, 37)
$objTextBoxR.Size = New-Object System.Drawing.Size(286, 20)
$objForm.Controls.Add($objTextBoxR)

# ###############
# Label-"Subject"
# ###############

$objLabelMS = New-Object System.Windows.Forms.Label
$objLabelMS.Location = New-Object System.Drawing.Size(18, 65)
$objLabelMS.Size = New-Object System.Drawing.Size(135,13)
$objLabelMS.Text = "Subject:"
$objForm.Controls.Add($objLabelMS)

#
# TextBox-Subject
#

$objTextBoxMS = New-Object System.Windows.Forms.TextBox
$objTextBoxMS.Location = New-Object System.Drawing.Size(155, 62)
$objTextBoxMS.Size = New-Object System.Drawing.Size(286, 20)
$objForm.Controls.Add($objTextBoxMS)

# ###############
# Label-Datum Von
# ###############

$objLabelVon = New-Object System.Windows.Forms.Label
$objLabelVon.Location = New-Object System.Drawing.Size(18, 87)
$objLabelVon.Size = New-Object System.Drawing.Size(135,13)
$objLabelVon.Text = "Datum von:"
$objForm.Controls.Add($objLabelVon)

#
# Date Picker
#

$objDatePickerVon = New-Object System.Windows.Forms.DateTimePicker
$objDatePickerVon.Location = New-Object System.Drawing.Size(155, 84)
$objDatePickerVon.Size = New-Object System.Drawing.Size(186, 20)
$objForm.Controls.Add($objDatePickerVon)

#
# Time Picker
#

$objTimePickerVon = New-Object System.Windows.Forms.DateTimePicker
$objTimePickerVon.Format = 4 # Time
$objTimePickerVon.ShowUpDown = $TRUE
$objTimePickerVon.Location = New-Object System.Drawing.Size(341, 84)
$objTimePickerVon.Size = New-Object System.Drawing.Size(100, 20)
$objForm.Controls.Add($objTimePickerVon)

# ###############
# Label-Datum Bis
# ###############

$objLabelBis = New-Object System.Windows.Forms.Label
$objLabelBis.Location = New-Object System.Drawing.Size(18, 109)
$objLabelBis.Size = New-Object System.Drawing.Size(135,13)
$objLabelBis.Text = "Datum bis:"
$objForm.Controls.Add($objLabelBis)

#
# Date Picker
#

$objDatePickerBis = New-Object System.Windows.Forms.DateTimePicker
$objDatePickerBis.Location = New-Object System.Drawing.Size(155, 106)
$objDatePickerBis.Size = New-Object System.Drawing.Size(186, 20)
$objForm.Controls.Add($objDatePickerBis)

#
# Time Picker
#

$objTimePickerBis = New-Object System.Windows.Forms.DateTimePicker
$objTimePickerBis.Format = 4 # Time
$objTimePickerBis.ShowUpDown = $TRUE
$objTimePickerBis.Location = New-Object System.Drawing.Size(341, 106)
$objTimePickerBis.Size = New-Object System.Drawing.Size(100, 20)
$objForm.Controls.Add($objTimePickerBis)

#
# TextBox-Result Statement
#

$objTextBoxResult = New-Object System.Windows.Forms.TextBox
$objTextBoxResult.MultiLine = $TRUE
$objTextBoxResult.ReadOnly = $True
$objTextBoxResult.ScrollBars = 2
$objTextBoxResult.Location = New-Object System.Drawing.Size(20, 134)
$objTextBoxResult.Size = New-Object System.Drawing.Size(423, 100)
$objForm.Controls.Add($objTextBoxResult)

#
# Form vorbereiten
#

$objForm.Add_Shown({$objForm.Activate()})

#
# Main Dialog
#

[void] $objForm.ShowDialog()

#
# Ende
#

import-module servermanager
….

Mehr Infos gibts hier!

Matthias